Privacy Policy
This Privacy Policy (“Policy”) sets out the principles and practices governing the collection, processing, storage, and protection of personal information of users who access and utilise our online gaming platform. We are committed to maintaining the highest standards of data protection in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act 2018, and all applicable United Kingdom legislation. Your privacy is paramount to us, and we have implemented comprehensive safeguards to ensure your personal data remains secure and confidential. This Policy applies to all visitors and registered users of our platform, and by accessing our services, you acknowledge that you have read and understood these terms. Last updated: January 18, 2026.
1. Information We Collect and How We Use It
We collect various categories of information to provide you with a secure and personalised gaming experience. This information falls into several distinct categories, each serving specific operational and regulatory purposes. The data we gather enables us to verify your identity, prevent fraud, comply with anti-money laundering regulations, and deliver the services you have requested through our platform.
When you register an account, we require essential identification information including your full legal name, date of birth, residential address, email address, and telephone number. During the account verification process, we may request additional documentation such as proof of identity and proof of address. We collect payment information when you make deposits or withdrawals, including bank account details, payment method type, and transaction history. This information is processed solely for the purpose of facilitating financial transactions and maintaining accurate records of your gaming activity.
We automatically collect technical data when you interact with our platform, including your IP address, browser type, operating system, device identifiers, and pages visited. Cookies and similar tracking technologies record your preferences, login sessions, and gaming patterns. This technical information helps us optimise platform performance, prevent unauthorised access, and detect suspicious activities that may indicate fraud or problem gambling behaviour.
- Identity verification information and supporting documentation
- Financial and payment method details
- Gaming activity and betting history
- Technical data and device information
- Communication preferences and contact information
- Marketing and promotional engagement records
2. Legal Basis for Data Processing
Our processing of personal data is grounded in several legal bases under GDPR and UK data protection law. The primary basis is the performance of a contract—specifically, our terms of service which you accept upon registration. This contractual relationship necessitates processing your information to deliver gaming services, process payments, and maintain your account.
Compliance with legal obligations forms another essential legal basis. We are required by UK gambling regulators, financial authorities, and anti-money laundering legislation to collect, process, and retain specific personal information. This regulatory framework ensures consumer protection and prevents the use of gaming platforms for illegal financial activities. We process data for legitimate interests, including fraud prevention, cybersecurity, improving our services, and maintaining platform integrity. These interests are balanced against your rights and privacy expectations as users of our platform.
Your explicit consent is obtained for specific processing activities, particularly regarding marketing communications and optional analytics. You retain full control over these preferences and may withdraw consent at any time through your account settings or by contacting our support team. Special category data, if collected under exceptional circumstances, is processed only with explicit consent and maintained under enhanced security protocols.
3. Data Protection Measures and Security
We employ industry-leading encryption protocols and security infrastructure to protect your personal information from unauthorised access, modification, or disclosure. All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security) technology with minimum 256-bit encryption. Data stored in our systems is protected through advanced encryption standards and multiple layers of access controls.
Our facilities maintain strict physical security measures including controlled access, surveillance systems, and restricted entry zones. Only authorised personnel with verified clearance can access areas containing personal information. All staff members handling personal data are bound by confidentiality agreements and receive regular data protection training. We conduct periodic security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
- End-to-end encryption for all data transmission
- Multi-factor authentication for account access
- Regular security assessments and vulnerability testing
- Segregation of personal data from gaming systems
- Automated intrusion detection and prevention systems
- Encrypted backups with restricted recovery protocols
- Annual third-party security audits and compliance certifications
4. Data Retention and Deletion
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law. Your identity verification documents and account information are retained for the duration of your account plus seven years following closure, in compliance with UK anti-money laundering regulations and gambling operator licensing requirements. Financial transaction records are maintained for a minimum of seven years as mandated by the Proceeds of Crime Act 2002 and HMRC regulations.
Communication records, including email correspondence and chat logs, are retained for three years unless they contain evidence of fraudulent activity or regulatory violations, in which case they may be retained longer. Technical logs and IP address records are typically deleted after eighteen months unless they relate to ongoing investigations or security incidents. Marketing preference data is retained until you withdraw consent or close your account, after which it is deleted or anonymised within thirty days.
You have the right to request deletion of your personal information, subject to our legal obligations. We will delete data that is no longer necessary for our stated purposes, provided such deletion does not conflict with regulatory retention requirements. If deletion is impossible due to legal constraints, we will restrict the processing of such data to storage only, with no further operational use.
5. Your Data Subject Rights and Control
Under UK GDPR, you possess fundamental rights regarding your personal information. The right of access allows you to request a copy of all personal data we hold about you in a structured, commonly used, and machine-readable format. Such requests must be fulfilled within thirty days. The right to rectification enables you to correct inaccurate or incomplete information held in our systems.
The right to erasure, commonly known as the right to be forgotten, permits you to request deletion of your data in specific circumstances, though this right is limited by our legal obligations to retain information for regulatory purposes. The right to restrict processing allows you to request that we limit how we use your information while disputes are resolved. The right to data portability enables you to obtain and reuse your personal data across different services.
You have the right to object to processing based on legitimate interests, particularly for marketing purposes. You also possess rights related to automated decision-making and profiling, including the right to request human review of automated decisions that significantly affect you. If you believe we have violated your data protection rights, you may lodge a complaint with the Information Commissioner’s Office (ICO), the independent UK authority responsible for data protection enforcement.
- Right to access your personal information
- Right to correct or update inaccurate data
- Right to request deletion or erasure
- Right to restrict or limit processing
- Right to data portability and transfer
- Right to object to processing
- Right to lodge complaints with the ICO
6. Third-Party Sharing and International Transfers
We share personal information with carefully selected third parties only when necessary for legitimate operational purposes. Payment processors receive financial information solely to facilitate transactions. These vendors are contractually obligated to maintain the same level of confidentiality and security as we do. Identity verification services may receive personal information and documents necessary for compliance verification. Regulatory authorities receive information as required by law, including the Gambling Commission and financial intelligence units.
We do not sell personal information to marketing companies or commercial data brokers. Any sharing with third parties is conducted under Data Processing Agreements that ensure equivalent protection standards. If we engage service providers located outside the United Kingdom, we implement appropriate safeguards such as Standard Contractual Clauses approved by the UK Information Commissioner to ensure lawful international transfer of your information.
Our platform may contain links to external websites and services not controlled by us. We are not responsible for the privacy practices of third-party sites. We encourage you to review their privacy policies independently before providing personal information. If you have questions about how your data is shared or transferred, please contact our Data Protection Officer through our dedicated privacy request channel. Your trust is essential to us, and we remain committed to transparent and responsible handling of your personal information at all times.
